To find out who owns a website, start at lookup.icann.org, the free registration lookup run by the Internet Corporation for Assigned Names and Numbers. Type the domain without the “www” or “https://” and submit. If the registrant’s name and address come back as “REDACTED FOR PRIVACY” (which is the usual result in 2026), move on to the website’s own pages, state business registries, the Wayback Machine, and DNS records to piece together the owner.
Run the ICANN Lookup First
The ICANN tool works on .com, .org, .net, and hundreds of other generic top-level domains. It’s free, needs no account, and returns the same core fields every time: the domain name, the registrar that sold it, creation and expiration dates, domain status codes, and the registrar’s abuse contact email and phone number.1ICANN. Registration Data Policy Those fields are always public. The registrant’s personal details are a separate question.
You may see the search called a “WHOIS lookup.” Since January 2025 the tool actually runs on the Registration Data Access Protocol (RDAP), which replaced the older WHOIS system.2ICANN. ICANN Update – Launching RDAP, Sunsetting WHOIS The results look much the same.
Why the Owner’s Name Is Usually Hidden
A redacted record isn’t a mistake on your end. After the European Union’s General Data Protection Regulation took effect in May 2018, registrars began hiding registrant details from public view, and most now apply those protections globally. Under ICANN’s Registration Data Policy, the registrant’s name, street address, postal code, phone, and fax are redacted; the email is replaced with an anonymous forwarding link or web form; the city and organization may also be hidden.1ICANN. Registration Data Policy Some owners also pay for a separate privacy or proxy service that substitutes the proxy company’s details, with the same practical effect.
Contact the Owner Through the Redacted Record
The lookup result still gives you a way to make contact. Registrars have to publish either a working email address or a link to a web form that forwards messages to the registrant without exposing their identity.1ICANN. Registration Data Policy Look for it in the registrant contact section. The message reaches the owner; whether they respond is up to them.
If you need the nonpublic data itself and have a legitimate reason, ICANN runs a Registration Data Request Service (RDRS). ICANN asks that you first confirm the data isn’t in the standard lookup, then submit a formal request through the RDRS or contact the sponsoring registrar directly about its disclosure process.2ICANN. ICANN Update – Launching RDAP, Sunsetting WHOIS Trademark disputes, fraud investigations, and court orders are the kinds of requests that typically succeed.
Read the Website Itself
When the registration record is a dead end, the website often names its owner outright. Start with the footer. Most professional sites run a copyright notice listing the company or person that claims the content. That line alone can identify the entity behind the domain.
The “About Us” and “Contact” pages usually list a physical address, founders or executives, and a phone number or contact form. On business sites they often name a parent or holding company, which can differ from the brand in the URL.
“Terms of Service” and “Privacy Policy” pages are also worth reading. They commonly include the legal name of the operating entity, its headquarters address, and sometimes a registered agent. No single federal law requires every U.S. website to identify itself in a privacy policy, but various state and international rules push commercial sites toward disclosure, and most comply. A legal name from one of these pages is the lead you take into the next step.
Verify the Name Against State Business Records
Every state maintains a business entity database through its secretary of state office, and most searches are free online. Enter the company name and you get the entity’s status (active or dissolved), its date of incorporation, officers or directors, and the registered agent’s name and address.
The registered agent matters. That’s the person or company legally authorized to receive lawsuits and official correspondence for the business, so even when the owner’s personal name appears nowhere on the site, the agent filing often shows who’s behind the company. Basic searches are typically free; certified copies and detailed filing histories can carry fees that vary by state.
Check Older Versions of the Site
The Internet Archive’s Wayback Machine at web.archive.org stores snapshots of websites going back years. Enter the domain, click “Browse History,” and you can view the site as it looked on specific dates.3Internet Archive. Using the Wayback Machine This matters most when a site has recently changed hands or quietly removed its contact information.
An older “About Us” page may name the original owner. A past footer may show a different company. A contact page that’s gone from the live site may still exist in the archive. The date code in each archived URL tells you exactly when the snapshot was captured, so you can trace how ownership or branding shifted.3Internet Archive. Using the Wayback Machine Some pages don’t load cleanly, and some sites block archiving, but the tool is free and often surfaces details the current site no longer carries.
Follow the DNS and Hosting Trail
DNS records won’t name the owner directly, but they show which company hosts the site and handles its email. Free DNS lookup tools return the domain’s nameservers, the IP address it points to, and its mail exchange (MX) records. Nameservers tied to a specific hosting account narrow the field. A well-known content delivery network or enterprise hosting plan can suggest a larger organization rather than an individual.
A reverse IP lookup takes the opposite angle: you enter a site’s IP address and see what other domains share the server. When several of those domains clearly belong to the same business, you can connect them back to the one you started with. Treat these as supporting evidence, not standalone answers.
Paid Historical Databases for Serious Searches
Several commercial services archive domain registration records captured before privacy protections became standard, with coverage sometimes reaching back to the mid-1990s. Subscriptions are aimed at investigators, legal professionals, and brand protection teams, and the pricing reflects that. For due diligence on a domain purchase or a legal matter, these services can surface registrant names, emails, and addresses from the years when that data was public by default. For most everyday searches, the free methods above are enough.